Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CMfrbPBuFTw0xUsva4lFE1-DvFY.roa
File:                     CMfrbPBuFTw0xUsva4lFE1-DvFY.roa (raw, json)
Hash identifier:          zDlavKcr+xXLRSZPvBzQeT932pfCx4vLTm+TGx0prFw=
Subject key identifier:   08:C7:EB:6C:F0:6E:15:3C:34:C5:4B:2F:6B:89:45:13:5F:83:BC:56
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       069C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CMfrbPBuFTw0xUsva4lFE1-DvFY.roa
Signing time:             Tue 31 Mar 2026 08:26:13 +0000
ROA not before:           Tue 31 Mar 2026 08:26:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=08C7EB6CF06E153C34C54B2F6B8945135F83BC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:60:a7:bd:6c:be:3a:ac:92:d9:39:14:ed:
                    de:8b:f0:8f:ee:c2:d6:a8:a5:c2:54:e3:3b:dc:b8:
                    55:0d:78:9c:b1:84:91:2f:75:fe:0f:90:33:f6:af:
                    2e:a4:d8:42:a7:16:7c:38:e9:4a:ac:50:b2:bd:9b:
                    a3:6e:26:d2:7c:7a:5d:df:7b:55:15:83:86:0e:74:
                    3d:d1:17:a2:72:a9:34:47:42:8e:b2:c5:e3:19:76:
                    84:f9:3a:64:d4:77:de:85:9b:76:7d:bd:90:03:7d:
                    34:74:4a:d5:5d:5b:fc:75:8f:ed:20:4d:31:1f:ee:
                    d5:cd:5d:a1:ad:bc:e0:28:26:ab:c1:ed:d0:c4:e0:
                    19:8b:36:8a:03:b8:c6:4f:ac:cf:4f:16:7a:f1:c0:
                    e2:37:6e:d0:dd:ee:ea:02:b1:c6:8e:9e:9c:ea:1f:
                    9b:de:89:16:00:98:f9:f8:a8:b7:d1:a7:77:8c:2e:
                    e0:3f:b7:99:b7:3e:29:1e:c4:0a:ae:18:bd:ce:18:
                    69:f7:5a:e3:92:57:b5:47:54:46:ea:7f:04:a0:ec:
                    25:b6:ea:1a:3f:2a:3c:c7:c6:98:67:83:7d:a1:55:
                    ef:ff:f7:66:a9:6e:04:c1:5a:db:c4:a6:c7:ad:5b:
                    12:bd:8c:e3:01:93:84:1d:b4:bf:e6:88:ba:f5:ed:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:EB:6C:F0:6E:15:3C:34:C5:4B:2F:6B:89:45:13:5F:83:BC:56
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CMfrbPBuFTw0xUsva4lFE1-DvFY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:8b:f0:46:4c:51:3c:e0:96:62:e5:30:b9:6f:a2:84:73:
         7d:30:82:a8:75:aa:1b:e9:fb:c5:93:cc:9d:70:67:95:d2:56:
         84:3b:9c:73:a8:7b:e0:c9:c7:1c:e3:b1:57:94:a1:7f:fa:8f:
         1e:ee:18:d3:f0:c2:29:3f:c1:44:41:47:75:6e:e9:34:63:94:
         62:38:95:2f:1b:67:c7:bb:3c:3c:01:6c:b6:10:e9:d5:9c:b5:
         e2:21:4b:f9:ae:cf:d0:09:29:70:23:a6:8f:d1:98:b5:a5:ad:
         c6:0a:c9:6e:04:30:e6:77:6f:68:5a:53:56:86:ef:c8:66:28:
         fa:15:a4:4d:28:05:45:81:c5:a5:63:ff:da:40:9d:33:2c:d4:
         bf:6f:96:df:73:da:55:cf:d2:9b:89:d9:71:5d:aa:fb:c3:9a:
         1a:e4:80:68:ab:6c:54:9b:eb:a4:0e:72:a0:35:44:99:85:bf:
         29:19:0d:cb:61:7e:12:db:af:c4:61:7f:25:8b:a3:7a:38:05:
         90:e8:9b:66:d3:cc:73:f9:6c:4f:6a:31:ed:11:a6:29:f8:60:
         da:46:bc:90:6f:e7:a4:44:cc:9f:41:b4:10:b9:ca:ac:05:4c:
         31:f7:09:10:83:13:37:2e:ed:23:cc:5d:12:47:97:30:14:f7:
         d5:1a:cf:47
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4QzdFQjZDRjA2RTE1
M0MzNEM1NEIyRjZCODk0NTEzNUY4M0JDNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtGWCnvWy+OqyS2TkU7d6L8I/uwtaopcJU4zvcuFUNeJyxhJEv
df4PkDP2ry6k2EKnFnw46UqsULK9m6NuJtJ8el3fe1UVg4YOdD3RF6JyqTRHQo6y
xeMZdoT5OmTUd96Fm3Z9vZADfTR0StVdW/x1j+0gTTEf7tXNXaGtvOAoJqvB7dDE
4BmLNooDuMZPrM9PFnrxwOI3btDd7uoCscaOnpzqH5veiRYAmPn4qLfRp3eMLuA/
t5m3PikexAquGL3OGGn3WuOSV7VHVEbqfwSg7CW26ho/KjzHxphng32hVe//92ap
bgTBWtvEpsetWxK9jOMBk4QdtL/miLr17a31AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUCMfrbPBuFTw0xUsva4lFE1+DvFYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9DTWZyYlBCdUZUdzB4VXN2YTRsRkUxLUR2Rlkucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa/gwDQYJKoZIhvcNAQEL
BQADggEBAJOMi/BGTFE84JZi5TC5b6KEc30wgqh1qhvp+8WTzJ1wZ5XSVoQ7nHOo
e+DJxxzjsVeUoX/6jx7uGNPwwik/wURBR3Vu6TRjlGI4lS8bZ8e7PDwBbLYQ6dWc
teIhS/muz9AJKXAjpo/RmLWlrcYKyW4EMOZ3b2haU1aG78hmKPoVpE0oBUWBxaVj
/9pAnTMs1L9vlt9z2lXP0puJ2XFdqvvDmhrkgGirbFSb66QOcqA1RJmFvykZDcth
fhLbr8RhfyWLo3o4BZDom2bTzHP5bE9qMe0Rpin4YNpGvJBv56REzJ9BtBC5yqwF
TDH3CRCDEzcu7SPMXRJHlzAU99Uaz0c=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client